Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
File: bBt3vE7dikuDdEdqc0dxm2drdV4.mft (raw, json)
Hash identifier: t/xJslPPn+5i8cfV9A50l5KDxkgr6MfxXxTOer7spFU=
Subject key identifier: 4F:CB:93:BD:E9:EA:10:1F:3A:4B:E0:46:6D:55:00:74:57:50:8F:C5
Authority key identifier: 6C:1B:77:BC:4E:DD:8A:4B:83:74:47:6A:73:47:71:9B:67:6B:75:5E
Certificate issuer: /CN=6c1b77bc4edd8a4b8374476a7347719b676b755e
Certificate serial: 019DE220F8D5DE180B0ABFF81D602FA4113E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
Manifest number: 0A7D
Signing time: Fri 01 May 2026 06:01:44 +0000
Manifest this update: Fri 01 May 2026 06:01:44 +0000
Manifest next update: Sat 02 May 2026 06:01:44 +0000
Files and hashes: 1: bBt3vE7dikuDdEdqc0dxm2drdV4.crl (hash: c3+HXCrWgdUzh6awG0ovKPin0E7EQLA5DrFNxekrAuY=)
2: e1omXpCIQpnerGyCBf44XvMH7b8.roa (hash: WuuVal2MbC5TVrn+qWtOZo1dB1Kr34wJojmJ2NY5UPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 May 2026 06:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e2:20:f8:d5:de:18:0b:0a:bf:f8:1d:60:2f:a4:11:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1b77bc4edd8a4b8374476a7347719b676b755e
Validity
Not Before: May 1 06:01:44 2026 GMT
Not After : May 2 06:01:44 2026 GMT
Subject: CN=4fcb93bde9ea101f3a4be0466d55007457508fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b9:a1:a6:cc:f4:44:c8:bb:c7:af:6a:8a:de:
ac:ea:78:10:2f:83:bd:44:b7:fd:57:5c:3d:d4:6b:
9f:8f:9a:54:27:13:f5:71:4c:36:b4:20:52:34:cb:
dc:3d:2d:60:fc:ae:b1:53:cb:ca:cf:68:50:4a:98:
6f:82:ae:d2:64:cd:5f:85:d4:c5:fe:4f:19:f4:58:
0d:20:14:49:8a:03:b1:16:1c:a3:da:b2:dc:e3:14:
80:84:7c:5a:da:5b:62:5a:64:b2:e7:90:fa:f6:46:
48:2d:3f:52:83:47:25:a7:c8:02:90:6f:76:01:72:
eb:cf:76:e7:85:9d:95:83:0e:f3:27:96:22:67:62:
83:a1:f0:f7:7d:f3:0e:37:ff:da:5f:75:33:da:0b:
80:09:d8:a6:da:17:bf:33:a2:59:44:8c:01:10:97:
15:f6:7a:8b:1f:fa:6b:13:6d:93:3e:f9:14:aa:3b:
30:5c:49:88:79:23:c7:70:e7:41:cb:88:87:b8:10:
a0:ea:9a:b1:ad:44:82:a3:6e:5a:0a:fd:89:d0:31:
06:50:af:81:d4:c7:57:cd:ed:d5:ca:16:3d:1a:46:
6d:ee:6b:e0:6d:f4:94:06:e1:d4:fb:1c:ae:97:f9:
fb:22:eb:68:95:1e:26:b1:fd:97:a2:d8:96:82:6b:
70:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CB:93:BD:E9:EA:10:1F:3A:4B:E0:46:6D:55:00:74:57:50:8F:C5
X509v3 Authority Key Identifier:
keyid:6C:1B:77:BC:4E:DD:8A:4B:83:74:47:6A:73:47:71:9B:67:6B:75:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ad:ef:46:6d:22:f7:8d:8e:1b:13:e3:02:0c:a7:6b:2c:f5:
2d:f5:18:08:74:bd:1c:19:43:1a:03:10:8d:1d:e0:8e:d9:9c:
98:2a:e6:21:99:63:be:c7:53:fb:5c:07:5a:eb:51:7a:57:85:
71:af:67:7e:87:3f:db:ef:8a:a5:7a:cd:c4:75:ec:43:e7:f1:
64:8b:74:c1:60:e9:25:7a:16:03:d1:9f:a3:7c:67:cb:a0:15:
db:9f:52:90:1c:f1:a5:a2:5d:b1:c6:aa:8a:e5:22:b8:96:c2:
c1:bc:55:87:ee:62:e8:e9:c8:50:f6:d6:27:78:4d:9d:20:ea:
35:10:2b:fb:4e:d9:f9:af:4f:4c:cd:49:85:5d:2d:f9:73:9a:
e9:b6:0e:20:ea:30:44:3c:34:67:22:d9:9f:2c:4c:2e:45:8b:
2d:35:70:4f:e3:3c:bb:bf:0d:4b:26:33:c9:c6:35:6c:f4:88:
e7:33:11:87:0d:fa:bf:77:15:ed:64:cd:ac:90:7e:9c:7c:73:
29:e5:ca:62:a2:a6:fd:13:26:ab:41:9b:57:ab:df:c7:5d:68:
3d:79:fd:31:72:85:cd:2a:46:ee:13:65:ab:70:0a:b7:1a:51:
75:bc:58:23:9d:d0:2b:44:5a:71:11:e9:75:0d:92:d0:4b:cd:
25:28:0d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 10:18:38 2026 by rpki-client